CVE-2007-5240

CVE-2007-5240: Visual truncation vulnerability in Sun JDK/JRE (Java Runtime Environment) affecting JRE/JDK 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, SDK/JRE 1.4.2_15 and earlier, and SDK/JRE 1.3.1_20 and earlier. An attacker could bypass the display of the untrusted-code warning ...

CVE-2008-1185

CVE-2008-1185 refers to an unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK across multiple legacy versions: JRE/JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier. The description states that remote attackers could gain privileges via a...

CVE-2007-4381

CVE-2007-4381 is a font-parsing vulnerability in Sun JDK/JRE up to specified versions (5.0 Update 9 and earlier; 1.4.2_14 and earlier) that could let an untrusted applet gain the same privileges as the user running the applet, enabling unauthorized actions via an applet. Public advisories from Re...

CVE-2007-5238

CVE-2007-5238 affects Sun JDK/JRE: Java Web Start in Sun JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, and SDK/JRE 1.4.2_15 and earlier. The vulnerability does not properly enforce access restrictions for untrusted applications, allowing a user‑assisted remote attacker to obt...

CVE-2006-6731

CVE-2006-6731 describes multiple buffer overflow vulnerabilities in Sun JDK/JRE 5.0 Update 7 and earlier, J2SE 1.4.2_12 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issues affect Java applets’ ability to read, write, or execute local files, with root causes including (1) integer ove...

CVE-2006-6736

CVE-2006-6736 affects Sun JDK/JRE 5.0 Update 6 and earlier, J2SDK/JRE 1.4.2_12 and earlier 1.4.x, and JDK/JRE 1.3.1_18 and earlier. The vulnerability allows an untrusted applet to access data in other applets (two issues). The connected advisories reference fixes in IBM/Sun Java updates and list ...

CVE-2007-5236

CVE-2007-5236 affects Sun Java Web Start/JRE/JDK on Windows. The issue is improper enforcement of access restrictions for untrusted applications, enabling a user‑assisted remote attacker to read local files via an untrusted application. Affected products include Sun JDK/JRE 5.0 Update 12 and earl...

CVE-2007-3922

CVE-2007-3922 describes an unspecified vulnerability in the Sun JDK/JRE applet class loader that allows a remote attacker to violate the applet’s outbound connection restrictions by connecting to localhost services on the host that loaded the applet. Affected products/versions include Sun JDK/JRE...

CVE-2010-0850

CVE-2010-0850 is an unspecified vulnerability in the Java 2D component of Oracle Java SE and Java for Business 1.3.1_27. The connected documents confirm the affected software and component (Java 2D) but do not provide a concrete root cause, exploit details, affected versions beyond the product/da...

CVE-2007-3698

The CVE-2007-3698 issue affects the Java Secure Socket Extension (JSSE) in Sun JDK/JRE, including Sun JDK/JRE 6 Update 1 and earlier, JDK/JRE 5.0 Updates 7–11, and SDK/JRE 1.4.2_11–1.4.2_14, where crafted SSL/TLS handshake requests could cause the Java Runtime Environment to stop responding (deni...

CVE-2007-5689

CVE-2007-5689 affects Sun JRE/JDK in multiple lines: JVM in JRE 1.3.x–1.4.x and JDK/JRE 5.x–6.x allows remote code execution or reading/modifying files via applets granted privileges. Connected docs indicate remediation via updated JRE/JDK packages (e.g., JVM/JRE updates to address these issues; ...

CVE-2008-1190

CVE-2008-1190 describes an unspecified Java Web Start vulnerability in Sun JDK/JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier that could allow a remote attacker to gain privileges via an untrusted application. The description notes this is a different issu...

CVE-2006-0615

CVE-2006-0615 concerns multiple unspecified vulnerabilities in Sun Java JDK/JRE 5.0 Update 4 and earlier (and 1.4.x through 1.4.2_09) that allow remote attackers to bypass the Java sandbox and obtain privileges via reflection APIs. Affected components include the Java applet/JRE sandbox and Web S...

CVE-2008-1196

CVE-2008-1196 describes a stack-based buffer overflow in Java Web Start (javaws.exe) that could allow remote code execution via a crafted JNLP file. Affected products/versions in the initial document include Sun JDK/JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and J2SE/JRE 1.4.2_16 and ...

CVE-2008-1186

CVE-2008-1186: Unspecified privilege-escalation in Sun JRE/JDK 5.0 Update 13 and earlier and J2SDK/JRE 1.4.2_16 and earlier, due to an untrusted application or applet. Remote attackers could gain privileges via such untrusted code. The provided connected documents confirm the vulnerability set in...

CVE-2002-0058

CVE-2002-0058 describes a vulnerability in the Java Runtime Environment where a web applet could abuse an HTTP proxy to hijack or sniff a client’s session by redirecting traffic to another server. Affected: Netscape 6.x (6.0–6.1) and 4.79 and earlier, and Microsoft VM builds 3802 and earlier (IE ...

CVE-2002-0076

CVE-2002-0076 affects the Java Runtime Environment (JRE) Bytecode Verifier. The verifier flaw allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation. Affected are Microsoft VM builds up to 3802 (Internet Explorer 4.x/5.x) and Net...

CVE-2008-1192

CVE-2008-1192 concerns the Java Plug-in for Sun JDK/JRE and related SDK/JRE versions (Sun JRE/JDK 6 Update 4 and earlier; 5.0 Update 14 and earlier; 1.4.2_16 and earlier; 1.3.1_21 and earlier) and allows remote attackers to bypass the same origin policy and “execute local applications” via unknow...

CVE-2001-1480

Affected software: Sun JRE/JDK 1.2–1.3.0_04. Vulnerable component: clipboard access logic in untrusted applets. Root cause/impact: enables untrusted applets to access the system clipboard, potentially exposing or altering clipboard data. Affected products explicitly listed as SUN JRE/JDK versions...

CVE-2007-3504

CVE-2007-3504 describes a directory traversal vulnerability in the PersistenceService of Sun Java Web Start (JDK/JRE 5.0 Update 11 and earlier; Java Web Start in SDK/JRE 1.4.2_13 and earlier) on Windows. An application that grants itself file overwrite privileges can cause unauthorized actions, p...

CVE-2008-1189

CVE-2008-1189 is described as a buffer overflow in Java Web Start affecting Sun JDK/JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier. The description indicates remote arbitrary-code execution via unknown vectors, in a different issue from CVE-2008-1188. Conn...

CVE-2007-5239

The CVE-2007-5239 issue affects Sun Java Web Start / JRE components. Affected products include JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, J2SE 1.4.2_15 and earlier, and J2SE 1.3.1_20 and earlier. The root cause is that Java Web Start/applets do not properly enforce access ...

CVE-2004-0651

CVE-2004-0651 affects Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03. The connected documents indicate a remote denial of service causing a VM hang, with OpenVAS entries framing a DoS for JRE versions older than 1.4.2_04. The underlying product is Sun JRE; the vulnerability impact is a...

CVE-2005-3583

The CVE-2005-3583 entry concerns Oracle/Sun Java Runtime Environment (JRE) and Software Development Kit (SDK) versions 1.4.2_08, 1.4.2_09, and 1.5.0_05 (and possibly others) that allow remote attackers to cause a denial of service by sending a crafted serialized object (e.g., a font object), whic...

CVE-2004-2764

CVE-2004-2764 affects Sun JRE/JSDK 1.4.x (1.4.0 to 1.4.2_04, and 1.4.1, 1.4.2) where untrusted applets and unprivileged servlets could gain privileges and read data from other applets due to issues in the XSLT processor (XML sniffing). The vulnerability description states privilege escalation via...

CVE-2005-0223

CVE-2005-0223 affects the Tru64 UNIX Software Development Kit (SDK) and Run Time Environment (RTE) versions 1.4.1 and 1.4.2. The vulnerability is a deserialization flaw that allows remote attackers to trigger a denial of service by causing the Java Virtual Machine to hang. The available connected...